Solved

SSL and external js file

Posted on 2003-11-18
4
397 Views
Last Modified: 2010-04-20
I have an SSL enabled page that loads an external javascript file,
but the .js is giving an SSL warning dialog for an invalid certificate.  
What can I do about that?
0
Comment
Question by:kaller2
  • 2
  • 2
4 Comments
 
LVL 4

Expert Comment

by:af500
ID: 9772787
Bring the external page internal :) I had the EXACT same problem. I do not think there is a way around this.
0
 
LVL 2

Author Comment

by:kaller2
ID: 9774651
It doesnt happen with our development server though.
0
 
LVL 4

Accepted Solution

by:
af500 earned 250 total points
ID: 9774715
Does your dev server use a SSL cert? What kind of SSL cert do you have? Is it using a wildcard? I would love to find a solution to this as I have the *same* problem.

I have a self-signed cert on my dev box, and a real Thawte cert on my prod box.  I get a popup on both servers when the external JS is included, if I remove it everything works fine.

As far as I know, once you have code in your site that did not originate from the domain listed on your cert ... that will cause the popup because your code is not 'really yours' anymore as far as the browser / cert is concerned.
0
 
LVL 2

Author Comment

by:kaller2
ID: 9775685
I may be dealing with some kind of local conflict with the hostname or proxy or caching problem, my hosting company report my site and certificate is working fine, and yes it is a signed certyificate with external javascript loading OK.

What fooled me was that when I accessed the production server from my development LAN, the js file triggered a warning.  But when I looked properly at the site certificate details it was MY LOCAL server certificate! that was doing it.  

Well it still is, so now I am looking into that, but at least I am a bit happier.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most ColdFusion developers get confused between the CFSet, Duplicate, and Structcopy methods of copying a Structure, especially which one to use when. This Article will explain the differences in the approaches with examples; therefore, after readin…
Periodically we have to update or add SSL certificates for customers. Depending upon your hosting plan you may be responsible for the installation and/or key generation. In the wake of Heartbleed many sites were forced to re-key. We will concen…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
I designed this idea while studying technology in the classroom.  This is a semester long project.  Students are asked to take photographs on a specific topic which they find meaningful, it can be a place or situation such as travel or homelessness.…

943 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now